NOJIRA-0: ensure nobody can create redirect loops